Annoying Adobe Flash Player update popups

Lately, while using Safari I have been getting an extra unsolisited tab popping up informing me that my Flash player is out of date and to install a new version. It might be possible that early on I did follow the update instructions thinking it was legit, but since then the popups continue to show up.


I have removed Google Chrome (some discussions indicated that Chrome wanted to have the PPAPI login installed) and also deleted any old versions of flash player as well as the current one, then reinstalled a clean version from the Adobe Plash Player web site.


My current Flash Player NPAPI plugin version is 32.0.0.101. If these popups are malware I'm sure there is something lurking around in the system to trigger this, but I stumped as to what/where it might be.


I'd appreciate any help to get rid of this problem.

MacBook Pro Retina

Posted on Dec 24, 2018 9:11 PM

Reply
Question marked as Top-ranking reply

Posted on Dec 25, 2018 4:43 AM

Please run EtreCheck and post the report here.


This is a diagnostic test and will check for adware.


https://itunes.apple.com/app/etrecheck/id1423715984?mt=12


Click  View in Mac App Store   button and then “Get” button underneath EtreCheck logo.


Download, install, click “Open’ in the dialog and run it.


Click “Share Report” button in the toolbar, select “Copy to Clipboard” .


Paste it into the reply.

11 replies
Question marked as Top-ranking reply

Dec 25, 2018 4:43 AM in response to gordonvp

Please run EtreCheck and post the report here.


This is a diagnostic test and will check for adware.


https://itunes.apple.com/app/etrecheck/id1423715984?mt=12


Click  View in Mac App Store   button and then “Get” button underneath EtreCheck logo.


Download, install, click “Open’ in the dialog and run it.


Click “Share Report” button in the toolbar, select “Copy to Clipboard” .


Paste it into the reply.

Dec 25, 2018 9:03 AM in response to gordonvp

Safari/Preferences/Advanced - enable the Develop menu, then go there and Empty Caches. Quit/reopen Safari and test. Then try Safari/History/Show History and delete all history items.  Quit/reopen Safari and test. You can also try try Safari/Clear History…. The down side is it clears all cookies. Doing this may cause some sites to no longer recognize your computer as one that has visited the web site. Go to Finder and select your user/home folder. With that Finder window as the front window, either select Finder/View/Show View options or go command - J.  When the View options opens, check ’Show Library Folder’. That should make your user library folder visible in your user/home folder.  Select Library/Caches/com.apple.Safari/Cache.db and move it to the trash.



Dec 26, 2018 1:04 AM in response to dominic23

@Gordonvp, I got caught by that phoney Flash update and warned all my friends that it was malware. Fortunately I had just backed up using Time Machine and I restored my Macbook to just before the update using TM overnight. It's a major job whichever method you use.

Put a note up on the office wall - I Don't Need Flash Any More - Never Update!!

Dec 26, 2018 8:10 PM in response to dominic23

Dominic,


I followed your instructions above and I think the problem may have disappeared. I have just now opened Safari and been going to different web sites, before logging into the Apple Support Communities, and there have not been any mysterious Adobe Flash Player tabs opening up.


I'll keep an eye on it in the coming days and see if it reappears, but I think the problem might have been fixed.


Thanks

Dec 25, 2018 7:17 PM in response to Eric Root

Eric,

I did try most of what you suggested, with the exception of clearing the history. I did clear all cookies manually via Preferences/Privacy/Manage Website Data. Unfortunately it didn't seem to make a difference. As soon as I quit and reopened Safari and went to the Apple website another tab immediately opened with the Flash Player junk.


Kinda stumped now. My next choice is to restore the system to my most recent Time Machine backup from about a month ago.

Dec 26, 2018 12:45 AM in response to gordonvp

EtreCheck report indicates adware infection.


You can remove this using two methods.


1. Using EtreCheck: https://etrecheck.com/maspro


    Run EtreCheck again.

Scroll up the sidebar and click the “Security” button



   “Adware” and the “Unsigned” files will be listed on the right hand side pane along with a “Remove” button.

    Click the ”Remove” button.


    Restart your Mac. Launch Safari holding the “Shift” key down.


2. Using “Malwarebytes for Mac”:


 1. Use  the latest release of MalwareBytes for Mac to remove malware/adware.

     Install guide:       https://support.malwarebytes.com/docs/DOC-1817

     Uninstall Guide:  https://support.malwarebytes.com/docs/DOC-1190


     The installer may ask you to allow it in Security & Privacy  /System Preference. Allow it.


 2. Uninstall any extension you have not installed knowingly.


     Disable or uninstall extensions.

     Section: Manage extensions: https://support.apple.com/guide/safari/use-safari-extensions-sfri32508/mac


Restart the Mac. Launch Safari holding the "shift"t key down

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Annoying Adobe Flash Player update popups

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.